This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
File:                     B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft (raw, json)
Hash identifier:          KVA654Frpm6ZoML3G0wpLXxME2a+r8Y6+Jyr4kqrp0g=
Subject key identifier:   AA:34:BA:A3:27:1A:4A:F4:B7:A1:E1:3B:B8:90:D3:68:89:7D:9A:2D
Authority key identifier: B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18
Certificate issuer:       /CN=b0fd731b6e9f7884ae26efe4393dea1667efb518
Certificate serial:       38AC00965110536C8F0523DF78C72179B6384C8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
Manifest number:          30
Signing time:             Mon 09 Feb 2026 04:15:25 +0000
Manifest this update:     Mon 09 Feb 2026 04:10:25 +0000
Manifest next update:     Tue 10 Feb 2026 06:49:25 +0000
Files and hashes:         1: B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl (hash: H7U6xv/KGcgdMb8n66UhOcEsDKdL3uHke6FS1POq4XY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ac:00:96:51:10:53:6c:8f:05:23:df:78:c7:21:79:b6:38:4c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0fd731b6e9f7884ae26efe4393dea1667efb518
        Validity
            Not Before: Feb  9 04:10:25 2026 GMT
            Not After : Feb 10 06:49:25 2026 GMT
        Subject: CN=AA34BAA3271A4AF4B7A1E13BB890D368897D9A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:5a:64:04:cc:4d:c6:12:68:1b:86:e2:f2:
                    88:e4:dd:45:f2:b0:63:07:cd:3b:1c:d6:0c:b3:92:
                    f7:24:18:17:bc:3e:ad:7b:82:fb:89:4d:ca:58:1b:
                    a0:4a:31:e3:0b:d4:92:3d:c4:ea:51:8f:1b:0e:3c:
                    26:3d:80:b9:7e:ef:d5:24:25:b8:44:26:68:e2:bb:
                    2a:c0:4b:78:6c:26:62:af:8f:b5:8c:57:62:a6:c0:
                    91:b9:43:fd:1c:34:bd:5f:0a:13:28:58:1e:ee:54:
                    bc:94:08:79:5a:f5:9b:9b:01:e3:29:0b:6e:de:b0:
                    1d:95:a4:3f:5f:50:65:34:0c:73:06:23:d9:86:5d:
                    f8:5e:0f:f6:7e:d7:10:58:58:0c:27:c6:80:86:4a:
                    f9:11:ba:3d:ce:be:b5:dd:46:44:2b:1f:fc:cb:be:
                    34:94:3b:5d:92:e1:9c:0f:8f:8f:ab:c3:f4:ad:21:
                    6e:e1:61:18:13:e3:48:07:cf:97:0f:e4:93:33:1a:
                    58:b4:cb:42:86:7b:39:0c:fd:c4:a6:ad:2b:30:e6:
                    88:84:38:b0:ca:50:7d:44:c8:f0:c5:c8:1c:5c:8a:
                    f6:4d:2e:cb:a5:22:8d:e3:fc:06:5a:f0:58:6d:7c:
                    6f:64:03:95:a2:5d:87:9b:ea:31:27:b4:f9:e4:fa:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:34:BA:A3:27:1A:4A:F4:B7:A1:E1:3B:B8:90:D3:68:89:7D:9A:2D
            X509v3 Authority Key Identifier:
                keyid:B0:FD:73:1B:6E:9F:78:84:AE:26:EF:E4:39:3D:EA:16:67:EF:B5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP1zG26feISuJu_kOT3qFmfvtRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46dfacbc-93df-4f75-b5d9-bc3205d72670/0/B0FD731B6E9F7884AE26EFE4393DEA1667EFB518.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:5e:53:7e:61:fc:76:f9:53:5b:80:4f:42:40:f1:ed:78:
         31:ba:26:82:d6:74:e0:84:00:06:37:8d:77:80:7a:2f:c9:76:
         84:a0:a4:a3:3c:9a:d9:b5:31:3d:8e:23:f1:ab:4c:58:2c:7f:
         38:7c:9f:ea:4b:c0:ed:04:df:dd:81:78:22:83:8f:a0:91:25:
         c5:f5:f1:60:3b:6c:88:3a:ba:6d:a4:e9:43:8b:e1:e2:3d:22:
         eb:ad:8b:b9:a1:8a:9b:a9:d7:c3:1c:c2:2c:a7:47:e5:14:4b:
         f6:e2:40:54:db:4c:59:a1:6a:01:7c:09:a9:13:02:de:2b:8c:
         3c:2b:93:92:52:13:10:d7:87:02:e0:a0:6f:ea:50:16:eb:30:
         79:6e:9f:74:8d:cf:5d:79:9d:9a:2a:94:d9:30:ec:9c:4c:1f:
         83:57:9f:51:5e:96:11:33:8a:07:91:3c:f0:51:6d:91:fb:d8:
         ef:8b:4b:ed:34:40:34:80:ab:de:b5:11:93:b3:39:93:c7:58:
         6b:66:7c:44:d8:bd:5c:af:26:6a:86:ae:53:de:7d:ca:bc:3f:
         16:e4:6d:e9:3f:80:ba:d6:90:94:74:d7:9b:98:26:4b:83:75:
         70:3c:63:88:87:a0:06:b6:5a:8b:87:de:0a:02:1b:d8:5b:92:
         45:50:37:41
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOKwAllEQU2yPBSPfeMchebY4TIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjBmZDczMWI2ZTlmNzg4NGFlMjZlZmU0MzkzZGVhMTY2
N2VmYjUxODAeFw0yNjAyMDkwNDEwMjVaFw0yNjAyMTAwNjQ5MjVaMDMxMTAvBgNV
BAMTKEFBMzRCQUEzMjcxQTRBRjRCN0ExRTEzQkI4OTBEMzY4ODk3RDlBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIT1pkBMxNxhJoG4bi8ojk3UXy
sGMHzTsc1gyzkvckGBe8Pq17gvuJTcpYG6BKMeML1JI9xOpRjxsOPCY9gLl+79Uk
JbhEJmjiuyrAS3hsJmKvj7WMV2KmwJG5Q/0cNL1fChMoWB7uVLyUCHla9ZubAeMp
C27esB2VpD9fUGU0DHMGI9mGXfheD/Z+1xBYWAwnxoCGSvkRuj3OvrXdRkQrH/zL
vjSUO12S4ZwPj4+rw/StIW7hYRgT40gHz5cP5JMzGli0y0KGezkM/cSmrSsw5oiE
OLDKUH1EyPDFyBxcivZNLsulIo3j/AZa8FhtfG9kA5WiXYeb6jEntPnk+gp5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqjS6oycaSvS3oeE7uJDTaIl9mi0wHwYDVR0j
BBgwFoAUsP1zG26feISuJu/kOT3qFmfvtRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZkZmFjYmMtOTNkZi00Zjc1LWI1ZDktYmMzMjA1ZDcy
NjcwLzAvQjBGRDczMUI2RTlGNzg4NEFFMjZFRkU0MzkzREVBMTY2N0VGQjUxOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NQMXpHMjZmZUlTdUp1X2tPVDNxRm1m
dnRSZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NmRmYWNiYy05
M2RmLTRmNzUtYjVkOS1iYzMyMDVkNzI2NzAvMC9CMEZENzMxQjZFOUY3ODg0QUUy
NkVGRTQzOTNERUExNjY3RUZCNTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfxeU35h/Hb5U1uAT0JA
8e14MbomgtZ04IQABjeNd4B6L8l2hKCkozya2bUxPY4j8atMWCx/OHyf6kvA7QTf
3YF4IoOPoJElxfXxYDtsiDq6baTpQ4vh4j0i662LuaGKm6nXwxzCLKdH5RRL9uJA
VNtMWaFqAXwJqRMC3iuMPCuTklITENeHAuCgb+pQFusweW6fdI3PXXmdmiqU2TDs
nEwfg1efUV6WETOKB5E88FFtkfvY74tL7TRANICr3rURk7M5k8dYa2Z8RNi9XK8m
aoauU959yrw/FuRt6T+AutaQlHTXm5gmS4N1cDxjiIegBrZai4feCgIb2FuSRVA3
QQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:56 2026 by rpki-client